pinpointdocker/pinpoint-quickstart:2.5.4 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of pinpointdocker/pinpoint-quickstart

pinpointdocker/pinpoint-quickstart:2.5.4 resolved to 382424391b89, scanned 21 Oct 2026: 447 findings, 12 critical, 3 on KEV; deployed by 1 chart, among them pinpoint.

Radar Score

7,3971224113298

447 findings on digest 382424391b89 · scanned 21 Oct 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.5.4resolves to	382424391b89	1 chart	today	1224113298	7,397

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Critical findings

12 distinct on this digest

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

Findings for digest 382424391b89 as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.1.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.1.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	USN-7352-1KEV	freetype@2.11.1+dfsg-1ubuntu0.2	2.11.1+dfsg-1ubuntu0.3
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	UBUNTU-CVE-2025-15467	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.21
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.4.4	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-coyote@8.5.100	no fix listed
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.4.4	2.6.7.1
Critical	USN-6737-1	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.7

Used by

1 chart

Chart	Version	Tag	Containers
pinpointpinpointVerified publisher	3.1.7	2.5.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.